HTTP Response Body Mismanagement in Starlet for Perl
CVE-2026-116127
Currently unrated
What is CVE-2026-116127?
Starlet versions prior to 0.33 for Perl mishandle the response body in HEAD requests, inadvertently corrupting subsequent responses on persistent or pipelined connections. The flaw arises because the request method is not appropriately conveyed to the response writer. As a result, bodies intended for HEAD requests are improperly included, which can disrupt the integrity of the connection. This is particularly problematic as it can desynchronize proxies that share connections across multiple clients, leading to unintended data being misinterpreted as part of the next response. Users are advised to upgrade to version 0.33 or later to mitigate this issue.